Privacy policy

1. Information we collect

We collect account details such as your email and artist name; artist links and profile information; song, campaign, budget, creative, and support details; public contact-form details you choose to send; subscription and payment status; and technical information needed for authentication, security, and service operation. Stripe processes full payment-card information, which MetaSongPromo does not store.

When you submit a Spotify link on our landing page or song form, we record the Spotify link, submission time, song and artist metadata when available, and whether the preview succeeds. These submissions are saved even if you do not finish creating an account, so our team can understand where the signup flow needs improvement. A Spotify artist name describes the song and is not proof of the visitor’s identity.

A random first-party browser cookie, lasting seven days, lets us connect a submitted link with account creation or sign-in in the same browser. Only a hash of that random value is stored with the submission, and scheduled cleanup removes it after seven days. Staff can then see the linked account’s profile name and email. The song form itself does not collect an email address. These logs do not store raw IP addresses or user-agent strings, do not establish ownership of the Spotify artist, and do not authorize marketing messages.

2. How we use information

We use information to create and secure accounts, process payments, prepare and manage campaigns, display results, send transactional updates, provide support, prevent abuse, maintain records, and comply with legal obligations. We send educational or promotional email only when you make a separate affirmative choice to receive it. Public checklist subscribers must also confirm the email address before the series begins.

3. Service providers

We share information only as needed with service providers that operate the platform, including Supabase for authentication and data storage, Stripe for payments, Vercel for hosting, Resend for transactional email, Spotify for song information, and Meta for advertising delivery and reporting.

4. Cookies, sessions, and analytics

We use essential authentication and security storage to keep artists signed in and protect account access. We use Vercel Web Analytics and Speed Insights to understand aggregate page usage and performance. Vercel Web Analytics does not use cookies and reports anonymized, aggregated data; we do not send email addresses, payment details, song links, or support-message content as analytics event properties. Campaign song links record link visits and handoffs to Spotify for artist reporting, including automatic redirects without a Listen-button click. Historical totals also include visits to song pages and clicks on their Spotify button. We classify only a limited traffic source such as Meta, Facebook, Instagram, direct, or referral; filter known preview bots; and use a random per-visit receipt to prevent duplicate retries. We do not store raw visitor IP addresses, complete user-agent strings, advertising click IDs, full referring URLs, or Spotify-side listening activity in song-link analytics. We do not use third-party advertising cookies on the MetaSongPromo website.

5. Retention

We retain information while your account is active and as needed to provide the service, answer contact and support requests, resolve disputes, prevent fraud, and meet financial or legal recordkeeping requirements. Resolved public contact submissions and their queued notification records are normally removed after 24 months. Listener-page retry receipts are removed after seven days, while daily aggregate campaign totals remain with the campaign so artists can review results. Account deletion removes your platform profile, campaigns, listener pages, results, event receipts, aggregate listener-page statistics, and uploaded creative from our active application database. Transaction records may be retained where needed to meet legal obligations, and payment providers may retain their own records where legally required.

Spotify form-submission logs are normally removed after 90 days by scheduled cleanup. Account deletion removes their link to your profile; account names and email addresses are not copied into these logs.

6. Your choices and rights

You can review and update artist information in your dashboard, manage billing through Stripe, sign out individual or all sessions, and delete your account from Settings. Marketing consent is optional, is recorded separately from acceptance of our service terms, and can be withdrawn at any time from Settings or the unsubscribe link in every marketing email. Withdrawing it does not stop essential account, payment, support, or active-campaign messages. Depending on your location, you may also have rights to access, correct, export, restrict, object to, or delete personal information.

7. Security and international processing

We use access controls, encrypted connections, private storage, row-level database security, and managed authentication. No online service can guarantee absolute security. Our providers may process information in countries other than yours under their applicable safeguards.

8. Contact

For privacy questions or requests, use the contact page and Support Messages, or write to SOUNDTIK LLC, 8 The Green, Suite B, Dover, Delaware 19901, United States. We may need to verify your identity before completing a request.